feat: Helm chart v2 #279

ppawlowski · 2024-01-17T10:25:49Z

Description

This PR presents all changes we would like to introduce in Flowfuse Helm v2:

Related Issue(s)

Checklist

I have read the contribution guidelines
Suitable unit/system level tests have been added and they pass
Documentation has been updated
- Upgrade instructions
- Configuration details
- Concepts
Changes flowforge.yml?
- Issue/PR raised on FlowFuse/helm to update ConfigMap Template
- Issue/PR raised on FlowFuse/CloudProject to update values for Staging/Production

Labels

Backport needed? -> add the backport label
Includes a DB migration? -> add the area:migration label

Bump postgresql chart version to `11.9.13`

Introduce first version of automatic helm chart tests

github-actions · 2024-01-17T10:27:18Z

node-red:2.2.3-main-linux-amd64 scan results

26 tests ±0 0 ✅ ±0 0s ⏱️ ±0s
4 suites ±0 0 💤 ±0
1 files ±0 26 ❌ ±0

For more details on these failures, see this check.

Results for commit d1dd9b7. ± Comparison against base commit 33e4c2a.

♻️ This comment has been updated with latest results.

github-actions · 2024-01-17T10:27:31Z

node-red:3.0.2-main-linux-amd64 scan results

1 files ±0 4 suites ±0 0s ⏱️ ±0s
7 tests - 4 0 ✅ ±0 0 💤 ±0 7 ❌ - 4
8 runs - 4 0 ✅ ±0 0 💤 ±0 8 ❌ - 4

For more details on these failures, see this check.

Results for commit d1dd9b7. ± Comparison against base commit 33e4c2a.

This pull request removes 7 and adds 3 tests. Note that renamed tests count towards both.

follow-redirects-1.15.3 ‑ [MEDIUM] CVE-2023-26159
libcrypto3-3.1.4-r1 ‑ [MEDIUM] CVE-2023-6129
libssl3-3.1.4-r1 ‑ [MEDIUM] CVE-2023-6129
openssh-client-common-9.3_p2-r0 ‑ [MEDIUM] CVE-2023-48795
openssh-client-default-9.3_p2-r0 ‑ [MEDIUM] CVE-2023-48795
openssh-keygen-9.3_p2-r0 ‑ [MEDIUM] CVE-2023-48795
openssl-3.1.4-r1 ‑ [MEDIUM] CVE-2023-6129

libcrypto3-3.1.4-r3 ‑ [MEDIUM] CVE-2023-6237
libssl3-3.1.4-r3 ‑ [MEDIUM] CVE-2023-6237
openssl-3.1.4-r3 ‑ [MEDIUM] CVE-2023-6237

♻️ This comment has been updated with latest results.

github-actions · 2024-01-17T10:27:34Z

file-server:main-linux-amd64 scan results

4 tests +2 0 ✅ ±0 0s ⏱️ ±0s
2 suites ±0 0 💤 ±0
1 files ±0 4 ❌ +2

For more details on these failures, see this check.

Results for commit d1dd9b7. ± Comparison against base commit 33e4c2a.

♻️ This comment has been updated with latest results.

github-actions · 2024-01-17T10:27:45Z

node-red:3.1.x-main-linux-amd64 scan results

3 tests +3 0 ✅ ±0 0s ⏱️ ±0s
2 suites ±0 0 💤 ±0
1 files ±0 3 ❌ +3

For more details on these failures, see this check.

Results for commit d1dd9b7. ± Comparison against base commit 33e4c2a.

♻️ This comment has been updated with latest results.

github-actions · 2024-01-17T10:28:05Z

node-red:3.1.x-main-linux-arm64 scan results

3 tests +3 0 ✅ ±0 0s ⏱️ ±0s
2 suites ±0 0 💤 ±0
1 files ±0 3 ❌ +3

For more details on these failures, see this check.

Results for commit d1dd9b7. ± Comparison against base commit 33e4c2a.

♻️ This comment has been updated with latest results.

github-actions · 2024-01-17T10:28:10Z

forge-k8s:main-linux-amd64 scan results

5 tests ±0 0 ✅ ±0 0s ⏱️ ±0s
4 suites ±0 0 💤 ±0
1 files ±0 5 ❌ ±0

For more details on these failures, see this check.

Results for commit d1dd9b7. ± Comparison against base commit 33e4c2a.

♻️ This comment has been updated with latest results.

github-actions · 2024-01-17T10:28:10Z

node-red:2.2.3-main-linux-arm64 scan results

26 tests ±0 0 ✅ ±0 0s ⏱️ ±0s
4 suites ±0 0 💤 ±0
1 files ±0 26 ❌ ±0

For more details on these failures, see this check.

Results for commit d1dd9b7. ± Comparison against base commit 33e4c2a.

♻️ This comment has been updated with latest results.

github-actions · 2024-01-17T10:28:45Z

node-red:3.0.2-main-linux-arm64 scan results

1 files ±0 4 suites ±0 0s ⏱️ ±0s
7 tests - 4 0 ✅ ±0 0 💤 ±0 7 ❌ - 4
8 runs - 4 0 ✅ ±0 0 💤 ±0 8 ❌ - 4

For more details on these failures, see this check.

Results for commit d1dd9b7. ± Comparison against base commit 33e4c2a.

This pull request removes 7 and adds 3 tests. Note that renamed tests count towards both.

follow-redirects-1.15.3 ‑ [MEDIUM] CVE-2023-26159
libcrypto3-3.1.4-r1 ‑ [MEDIUM] CVE-2023-6129
libssl3-3.1.4-r1 ‑ [MEDIUM] CVE-2023-6129
openssh-client-common-9.3_p2-r0 ‑ [MEDIUM] CVE-2023-48795
openssh-client-default-9.3_p2-r0 ‑ [MEDIUM] CVE-2023-48795
openssh-keygen-9.3_p2-r0 ‑ [MEDIUM] CVE-2023-48795
openssl-3.1.4-r1 ‑ [MEDIUM] CVE-2023-6129

libcrypto3-3.1.4-r3 ‑ [MEDIUM] CVE-2023-6237
libssl3-3.1.4-r3 ‑ [MEDIUM] CVE-2023-6237
openssl-3.1.4-r3 ‑ [MEDIUM] CVE-2023-6237

♻️ This comment has been updated with latest results.

github-actions · 2024-01-17T10:29:35Z

file-server:main-linux-arm64 scan results

4 tests +2 0 ✅ ±0 0s ⏱️ ±0s
2 suites ±0 0 💤 ±0
1 files ±0 4 ❌ +2

For more details on these failures, see this check.

Results for commit d1dd9b7. ± Comparison against base commit 33e4c2a.

♻️ This comment has been updated with latest results.

github-actions · 2024-01-17T10:30:33Z

forge-k8s:main-linux-arm64 scan results

5 tests ±0 0 ✅ ±0 0s ⏱️ ±0s
4 suites ±0 0 💤 ±0
1 files ±0 5 ❌ ±0

For more details on these failures, see this check.

Results for commit d1dd9b7. ± Comparison against base commit 33e4c2a.

♻️ This comment has been updated with latest results.

hardillb

It mainly looks good, with just the comment about the forge.domain entry in the default values file.

Need to decide if we update the tests to pass --set-string forge.domain=example.com or keep the change.

helm/flowforge/values.yaml

hardillb · 2024-01-17T13:34:31Z

Looks good, will let the tests finish and then approve

ppawlowski and others added 30 commits November 17, 2023 09:39

Initial pipeline version with configs

3624f9d

Rename pipeline

4c71ac3

Fix config path

768c8eb

Update ct config

b93cd52

Use multiple chart values

c089619

Update chart info file

e07ff89

Add bitnami repo

6f6f4fb

Fix new-line-at-end-of-file in default values file

1139055

Remove values from lint step

871044b

Fix path to ci value file

088f42f

Do not fail fast on parallel runs

60b8d6c

Label nodes

c03fbc2

Add default domain value

7bd83ef

Remove postgresql storageclass default values

aa294e3

Upgrade pgpassword secret reference in job

d9ee223

Debug ct install

51df345

Rearrange multiple values file

0591985

Update postgresql values to match new version

e65eaec

Update pipeline to new values files approach

d5a7b57

Remove matrix strategy

88decf9

Add chart validation against kubeapi

0c3a3d3

Bump postgresql chart version to 11.9.13

1750a77

Merge branch 'main' into feat-postgres-chart-update

70e57a4

Update values.yaml

69501e1

Merge branch 'main' of github.com:flowforge/helm into feat-linter

7d931f7

Update branch and path restrictions in helm-chart.yml

9a3f5e2

Merge pull request #229 from FlowFuse/feat-postgres-chart-update

f5dce35

Bump postgresql chart version to `11.9.13`

Merge pull request #221 from FlowFuse/feat-linter

c1e850f

Introduce first version of automatic helm chart tests

Add chart scanning to helm workflow

7602b20

Add kube-score scan to workflow

d3170da

ppawlowski and others added 7 commits January 12, 2024 13:58

Remove seccompProfile from forge values

678d4d4

Allow to configure resources for each container

f904233

feat: Add possibility to configure securityContext for each pod (#275)

b6dbf87

Merge branch 'v2' into feat-resources-limits

5ab6fa3

Fix missing brackets

ad8dd5a

Merge branch 'main' of github.com:flowforge/helm into v2

2b65df9

feat: Allow to configure resources for each container (#278)

4330d52

ppawlowski requested review from knolleary and hardillb January 17, 2024 10:25

hardillb changed the title ~~Helm chart v2~~ feat: Helm chart v2 Jan 17, 2024

hardillb requested changes Jan 17, 2024

View reviewed changes

helm/flowforge/values.yaml Outdated Show resolved Hide resolved

Remove domain value from helm chart default values

015503b

ppawlowski requested a review from hardillb January 17, 2024 13:25

ppawlowski added 2 commits January 17, 2024 14:28

Set forge.domain value on chart validation

802f942

Set forge.domain value on chart templating for checkov

30500bc

hardillb approved these changes Jan 17, 2024

View reviewed changes

Remove reference to v2 branch in hel chart validation workflow

d1dd9b7

hardillb merged commit 345433a into main Jan 17, 2024
41 checks passed

hardillb deleted the v2 branch January 17, 2024 15:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: Helm chart v2 #279

feat: Helm chart v2 #279

ppawlowski commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

hardillb left a comment

hardillb commented Jan 17, 2024

feat: Helm chart v2 #279

feat: Helm chart v2 #279

Conversation

ppawlowski commented Jan 17, 2024 • edited Loading

Description

Related Issue(s)

Checklist

Labels

github-actions bot commented Jan 17, 2024 • edited Loading

node-red:2.2.3-main-linux-amd64 scan results

github-actions bot commented Jan 17, 2024 • edited Loading

node-red:3.0.2-main-linux-amd64 scan results

github-actions bot commented Jan 17, 2024 • edited Loading

file-server:main-linux-amd64 scan results

github-actions bot commented Jan 17, 2024 • edited Loading

node-red:3.1.x-main-linux-amd64 scan results

github-actions bot commented Jan 17, 2024 • edited Loading

node-red:3.1.x-main-linux-arm64 scan results

github-actions bot commented Jan 17, 2024 • edited Loading

forge-k8s:main-linux-amd64 scan results

github-actions bot commented Jan 17, 2024 • edited Loading

node-red:2.2.3-main-linux-arm64 scan results

github-actions bot commented Jan 17, 2024 • edited Loading

node-red:3.0.2-main-linux-arm64 scan results

github-actions bot commented Jan 17, 2024 • edited Loading

file-server:main-linux-arm64 scan results

github-actions bot commented Jan 17, 2024 • edited Loading

forge-k8s:main-linux-arm64 scan results

hardillb left a comment

Choose a reason for hiding this comment

hardillb commented Jan 17, 2024

ppawlowski commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading

github-actions bot commented Jan 17, 2024 •

edited

Loading